This is an automated email from the ASF dual-hosted git repository. Aman-Mittal pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/fineract-loan-origination.git
commit 1bcaf924da2afdf52bbefbae11afad2bfa93607f Merge: 13eb05b 1e82c3e Author: Aman-Mittal <[email protected]> AuthorDate: Wed Aug 12 11:08:30 2026 +0530 Merge pull request #66 from KRYSTALM7/feature/FINERACT-2442-security-hardening FINERACT-2442: Close auth vulnerabilities, harden secrets config, wire frontend CI .github/workflows/ci.yml | 40 +- frontend/src/app/app.routes.ts | 25 +- frontend/src/app/core/guards/staff-auth.guard.ts | 2 +- .../src/app/core/interceptors/auth.interceptor.ts | 2 +- .../src/app/core/models/staff-application.model.ts | 7 +- frontend/src/app/core/services/auth.service.ts | 36 +- .../services/customer-loan-application.service.ts | 28 +- .../app/core/services/loan-application.service.ts | 26 +- .../src/app/core/services/staff-auth.service.ts | 46 +- .../services/staff-loan-application.service.ts | 18 +- .../loan-application-detail.component.ts | 14 +- .../loan-application-list.component.scss | 2 +- .../app/features/my-loans/my-loans.component.html | 4 +- .../staff-application-detail.component.ts | 847 ++++++++++++++------- .../staff-application-list.component.ts | 339 ++++++--- .../staff/dashboard/staff-dashboard.component.ts | 433 +++++++---- .../features/staff/login/staff-login.component.ts | 259 ++++--- .../layout/staff-layout/staff-layout.component.ts | 619 ++++++++------- frontend/src/app/shared/styles/_status-colors.scss | 2 +- .../fineract/los/api/AdminCustomerController.java | 2 + .../fineract/los/api/ApprovalController.java | 4 +- .../fineract/los/api/DisbursementController.java | 2 + .../los/api/LoanApplicationController.java | 2 + .../fineract/los/bridge/MockFineractAdapter.java | 2 +- .../org/apache/fineract/los/config/CorsConfig.java | 52 ++ .../apache/fineract/los/config/SecurityConfig.java | 23 +- .../fineract/los/security/JwtProperties.java | 20 + .../fineract/los/security/JwtSecretValidator.java | 58 ++ .../los/security/MockCustomerIdentityService.java | 2 + src/main/resources/application.yml | 4 +- .../los/cucumber/CucumberSpringConfig.java | 2 + 31 files changed, 1862 insertions(+), 1060 deletions(-)
